Password Escrow Service
Password Escrow Service offered by Rob Bandler and Glenn Larratt provides a secure vault to store and recover administrative passwords, encryption keys, and digital identities. The service is designed to reduce the risk of credential theft and enhance policy compliance through secure and centrally managed practices, benefiting TSPs, Instructional Professionals, Faculty, and Staff. With features like multifactor authentication, 24/7 availability, and no fee service, it ensures protection and monitoring round the clock.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
Password Escrow Service Rob Bandler / Glenn Larratt March 22, 2016
Agenda Introductions Service Description Value Proposition Metrics Cost Risk Mitigation and Management More information Q&A
Introductions Service owner: Rob Bandler Service manager: Glenn Larratt Other service delivery team members: Lillian Isacks Meryl Bursic
Service Description Service Name: Password Escrow Service Service Product: Password Manager Pro In support of Policy 5.3 & Policy 5.8, the Password Escrow service provides a secure, centrally managed vault to safely store and ensure recovery of administrative passwords, encryption keys and digital identities Available to: TSPs, Instructional Professionals, Faculty, Staff for non- personal use No Fee Service Service tier: One
Value Proposition Value proposition Available 24/7/365 for quick, easy self service use Secure, centrally managed service No Fee Customer Impact Reduces risk of credential theft through safer password practices Supports TSPs who must safely manage many passwords Key benefits Leverages multifactor authentication (Duo) Aids in policy compliance, easy to use, fee free, approved, recognized escrow vault Protected, managed and monitored 24/7/365
Metrics Number of Users (Password Manager Pro): 353 Number of Password Administrators: 111 Number of Passwords retrieved: 2878 ~$97.41 per user per year Availability: 100%
Cost Cost to deliver the service: $34,387 per year $97.41 per user per year $11.95 per password retrieved $7.27 per password stored 4727 Passwords Protected - Priceless No Fee Service
Password Escrow Service Cost $1,563 $1,563 $13,862 Hardware & Software Labor Staff Support Administrative Overhead $17,399
Risk Mitigation and Management What risks does use of the service mitigate? Credential and system compromise Financial loss Reputational harm Information insecurity How does the service mitigate risks? Policy Compliance Secure, easy to use, centrally managed and monitored Leverages multi-factor authentication Safe mechanism for storing and sharing administrative passwords Disaster Recovery / Business Continuity
More information Service web page: http://www.it.cornell.edu/services/password_escrow/ Service catalog entry: https://catalog.it.cornell.edu/admin/44 Service level expectations: https://www.it.cornell.edu/services/sle.cfm?doc=90 Service quarterly report: http://cio.cornell.edu/resources/it-reports-documents- and-presentations/itcornell-quarterly-metrics/password- escrow-service
